Except as limited by Sec. 480.139(a) and Sec. 480.140 of this subpart, QIOs must disclose to the Department all information requested by the Department in the manner and form requested. The information can include confidential and non-confidential information and requests can include those made by any component of the Department, such as CMS. [76 FR 26547, May 6, 2011]